Legal
Privacy Policy
Effective Date: April 16, 2026 · Last Updated: April 16, 2026
1. Who We Are
Tervin ("Tervin," "we," "us," or "our") is an Answer Engine Optimization (AEO) platform for digital marketing agencies. We are operated by Farrukh Zafar, currently based in Riverside, California, United States.
For privacy-related inquiries, contact us at: privacy@tervin.io
2. Scope of This Policy
This Privacy Policy applies to all personal data collected through the Tervin website, the early access signup form, and any communications between you and Tervin.
This policy covers all visitors globally, including residents of the EEA, United Kingdom, California (USA), Canada, Australia, Brazil, and all other jurisdictions where privacy laws apply.
3. Data We Collect
When you submit the early access form, we collect:
- Full name
- Agency name
- Work email address
- Number of clients you currently manage
- Timestamp of submission
- IP address (for spam prevention and rate limiting)
We do not collect payment information, government identification, health data, or any special category data as defined under GDPR Article 9.
4. How We Use Your Data
To manage your early access registration. We use your name, agency name, and email to communicate with you about your place on the early access list and launch information.
To understand our prospective user base. The number of clients you manage helps us prioritize features and plan capacity.
To send transactional emails. We send a confirmation email when you register and follow-up communications about early access status.
To prevent spam and abuse. We use your IP address to apply rate limiting. We do not store IP addresses beyond the session window for this purpose.
To comply with legal obligations. We retain records as required by applicable law.
5. Legal Basis for Processing (GDPR / UK GDPR)
Contractual necessity (Article 6(1)(b)): Processing your name and email is necessary to register you for early access.
Legitimate interests (Article 6(1)(f)): We have a legitimate interest in understanding our prospective customer base and in protecting the Site from spam.
Consent (Article 6(1)(a)): Where we send marketing communications beyond transactional emails, we will request your explicit consent.
6. California Privacy Rights (CCPA / CPRA)
If you are a California resident, you have the right to know, delete, correct, and opt-out of sale of your personal information. We do not sell or share personal information for cross-context behavioral advertising.
To exercise your California rights, contact us at privacy@tervin.io. We will respond within 45 days.
7. Canadian Privacy Rights (PIPEDA / Law 25)
We comply with PIPEDA and provincial equivalents including Quebec's Law 25. You have the right to access personal information we hold about you, to correct inaccuracies, and to withdraw consent for non-essential processing. Contact us at privacy@tervin.io.
8. Australian Privacy Rights (Privacy Act 1988)
We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). You have the right to access and correct personal information we hold. Contact us at privacy@tervin.io with any requests or complaints. Unresolved complaints may be escalated to the OAIC.
9. Brazilian Privacy Rights (LGPD)
We comply with the Lei Geral de Proteção de Dados (LGPD). You have rights to confirmation of processing, access, correction, anonymization or deletion of unnecessary data, portability, and the right to revoke consent. Contact us at privacy@tervin.io.
10. Data Retention
We retain your early access registration data until the Tervin platform launches and you have been onboarded or notified, or until you request deletion. After that period, we will delete or anonymize your personal data unless legal obligations require retention.
11. Data Sharing and Third Parties
We share your personal data only with the following service providers:
- Supabase — Database infrastructure (SOC 2 compliant). Data may be stored in the United States.
- Resend — Email delivery service. Processes your email address only.
- Vercel — Website hosting. Processes request metadata including IP addresses.
We do not sell your personal data or share it with advertisers or data brokers.
12. International Data Transfers
Tervin is based in the United States. If you are located in the EEA, UK, or other jurisdictions with data transfer restrictions, your data may be transferred to and processed in the United States. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent transfer mechanisms.
13. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS), row-level security on our database, and access controls. No method of transmission over the internet is completely secure.
14. Children's Privacy
Tervin is a B2B platform intended for professionals. We do not knowingly collect personal data from anyone under the age of 16. Contact us at privacy@tervin.io if you believe we have inadvertently collected such data.
15. Your Rights (All Users)
Regardless of location, you may contact us at any time to access, correct, delete, or port your personal data, or to withdraw consent or object to processing. We will respond within 30 days.
16. Cookies and Tracking
The Tervin Site currently does not use tracking cookies, advertising pixels, or third-party analytics. If this changes, we will update this policy and, where required, request your consent.
17. Changes to This Policy
We may update this Privacy Policy as the platform evolves. We will notify registered users of material changes by email and by updating the Effective Date above.
18. Contact and Complaints
Email: privacy@tervin.io
If you are in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (UK: ICO at ico.org.uk). US users may contact the FTC at ftc.gov.